This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/bVTuo8Ua3g-TyKuMDhWJl9Dvstw.roa File: bVTuo8Ua3g-TyKuMDhWJl9Dvstw.roa (raw, json) Hash identifier: WIkVU+skIaxRI8MrZFEEe8oIF0mlOk9UbWKDn45Rtlo= Subject key identifier: 6D:54:EE:A3:C5:1A:DE:0F:93:C8:AB:8C:0E:15:89:97:D0:EF:B2:DC Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B35FFE094566F4CA22FBFEC41453E85 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/bVTuo8Ua3g-TyKuMDhWJl9Dvstw.roa Signing time: Thu 01 Jan 2026 20:18:14 +0000 ROA not before: Thu 01 Jan 2026 20:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24875 IP address blocks: 185.245.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ff:e0:94:56:6f:4c:a2:2f:bf:ec:41:45:3e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d54eea3c51ade0f93c8ab8c0e158997d0efb2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9d:80:9e:23:fa:a6:eb:af:84:7f:25:7f:08: 34:2a:30:b9:17:16:11:c1:48:22:bd:72:aa:b7:eb: 0f:83:0d:83:23:bb:f1:33:f1:f9:ca:5a:e9:f7:58: 57:81:86:d6:8b:c3:63:3e:84:03:43:1d:89:c4:df: 3c:3e:bf:a4:f8:fe:5a:b7:ac:8f:ca:0d:78:34:f9: e6:23:c4:10:a7:da:19:a9:4e:1b:20:a6:85:26:eb: bf:dd:1c:43:95:62:7a:b7:91:5b:99:1f:0a:54:82: 07:b9:e7:08:b3:cc:7b:a4:3e:9f:d3:40:39:76:a3: 22:2d:de:d7:6f:2e:c8:20:47:3b:3a:b6:bd:86:57: 1f:0f:32:2a:7f:88:e8:04:7e:12:89:b7:86:60:20: 7e:17:da:05:75:68:c1:80:f7:d4:e7:ee:f0:1d:39: ea:11:7f:2c:da:9d:fd:5f:1d:a6:c0:a7:a4:24:72: 0c:c2:6b:4a:5b:86:41:ca:fc:29:93:c2:20:fc:ab: bb:5b:2b:82:8a:d8:85:94:92:af:93:e3:a8:5b:cd: cd:60:71:ca:d1:ac:10:56:8d:94:c9:18:5f:4c:2b: 61:56:4c:96:e8:58:b4:02:11:57:26:ee:86:76:dc: 8b:b3:26:72:2b:f4:45:42:09:25:b8:3b:9a:12:02: 20:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:54:EE:A3:C5:1A:DE:0F:93:C8:AB:8C:0E:15:89:97:D0:EF:B2:DC X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/bVTuo8Ua3g-TyKuMDhWJl9Dvstw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.3.0/24 Signature Algorithm: sha256WithRSAEncryption bf:e6:24:06:a5:7f:29:43:ac:20:98:bb:85:54:00:24:10:c6: 55:c1:f9:e6:66:68:1c:26:ad:4f:e7:33:73:a4:5b:99:7a:4e: 5e:4f:73:b8:6d:c1:c3:92:dd:26:4e:8c:c8:4c:e3:82:0b:b9: ef:34:31:77:ee:ad:b4:47:f0:7c:80:86:38:ef:57:d5:f0:78: c9:77:e2:f2:2e:8d:6b:e6:e8:73:57:3d:d9:d5:d5:38:db:f3: 00:36:7c:c3:1a:e0:e8:3a:08:07:36:be:a1:bc:cb:63:41:84: ff:21:c9:1a:97:e3:9a:22:7d:34:aa:8b:26:17:0e:93:1e:63: 6e:c5:13:9d:7c:f8:f4:bd:a0:12:3d:f8:a7:7e:6c:e5:9a:f2: 17:48:ec:eb:fa:97:78:27:b4:b9:cd:d4:29:c4:a3:33:3e:b9: 82:2e:a4:c1:b7:09:a6:30:eb:3d:e3:aa:69:32:6e:6d:3f:45: d7:77:7e:f6:8a:09:25:36:92:52:4a:26:18:89:36:e4:65:d8: a1:b2:45:fb:68:19:ec:7d:3d:da:e6:d5:fc:69:82:6c:d5:b2: 6b:72:c5:af:0a:1b:5a:59:7f:9a:dd:54:1e:5e:4d:db:01:68: c8:c6:7e:e2:07:05:02:96:78:01:41:5a:f8:0b:18:bc:e0:3f: 56:e0:17:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nf/glFZvTKIvv+xBRT6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDU0ZWVhM2M1MWFkZTBmOTNjOGFiOGMwZTE1ODk5N2QwZWZiMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8p2AniP6puuvhH8lfwg0KjC5FxYR wUgivXKqt+sPgw2DI7vxM/H5ylrp91hXgYbWi8NjPoQDQx2JxN88Pr+k+P5at6yP yg14NPnmI8QQp9oZqU4bIKaFJuu/3RxDlWJ6t5FbmR8KVIIHuecIs8x7pD6f00A5 dqMiLd7Xby7IIEc7Ora9hlcfDzIqf4joBH4SibeGYCB+F9oFdWjBgPfU5+7wHTnq EX8s2p39Xx2mwKekJHIMwmtKW4ZByvwpk8Ig/Ku7WyuCitiFlJKvk+OoW83NYHHK 0awQVo2UyRhfTCthVkyW6Fi0AhFXJu6GdtyLsyZyK/RFQgkluDuaEgIgAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG1U7qPFGt4Pk8irjA4ViZfQ77LcMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvYlZUdW84VWEzZy1UeUt1TURoV0psOUR2c3R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufUDMA0G CSqGSIb3DQEBCwUAA4IBAQC/5iQGpX8pQ6wgmLuFVAAkEMZVwfnmZmgcJq1P5zNz pFuZek5eT3O4bcHDkt0mTozITOOCC7nvNDF37q20R/B8gIY471fV8HjJd+LyLo1r 5uhzVz3Z1dU42/MANnzDGuDoOggHNr6hvMtjQYT/Ickal+OaIn00qosmFw6THmNu xROdfPj0vaASPfinfmzlmvIXSOzr+pd4J7S5zdQpxKMzPrmCLqTBtwmmMOs946pp Mm5tP0XXd372igklNpJSSiYYiTbkZdihskX7aBnsfT3a5tX8aYJs1bJrcsWvChta WX+a3VQeXk3bAWjIxn7iBwUClngBQVr4Cxi84D9W4Bfq -----END CERTIFICATE-----Generated at Wed Jan 21 09:23:04 2026 by rpki-client